Zero-day Vulnerability Database

Change view:

Zero-day vulnerabilities discovered: 1

Hardcoded credentials in Siemens SIMATIC WinCC and PSC 7 SCADA systems
CVE-2010-2772

Hardcoded credentials

The vulnerability allows a local user to obtain hardcoded credentials.

The vulnerability exists due to usage of hardcoded password to access back-end database. A local user can obtain password and gain unaithorized access SCADA system.

Successful exploitation of the vulnerability may allow an attacker to gain complete control over the industrial process.

Note: this vulnerability is being actively exploited by the Stuxnet malware.
i

The vulnerabiilty was used by Stuxnet malware together with CVE-2012-3015.

Software: Siemens SIMATIC WinCC

The vulnerabiilty was used by Stuxnet malware together with CVE-2012-3015.

Vulnerability Scanning SaaS

Vulnerability scanning SaaS service is online 3-rd generation vulnerability scanner with scheduled assessments and vulnerability subscription. You can use service to check security of your network perimeter.